This Privacy Policy explains how Paving Slabs Direct collects, uses, stores, and protects personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website, you agree to the practices described below.
1. Who We Are
Paving Slabs Direct is the data controller for personal data collected via this website. If you have questions about this policy or your personal data, please contact us using the details shown on our website.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Name and company name (where provided)
- Billing address and delivery address
- Email address and telephone number
- Order information, order history, and communications
- Payment status and transaction references (payment card details are handled by our payment providers and are not stored by us)
- IP address, device information, browser type, and website usage data
- Information you submit via forms, email, live chat (if enabled), or phone
We do not knowingly collect personal data from children.
3. How We Use Your Personal Data
We use personal data only where necessary for legitimate business purposes, including:
- Processing and fulfilling orders
- Arranging delivery and logistics (including pallet and kerbside deliveries where applicable)
- Providing customer service and responding to enquiries
- Managing accounts, invoicing, refunds, and credit notes
- Preventing fraud and maintaining site security
- Improving our website, product range, and customer experience
- Meeting legal, tax, and accounting obligations
4. Our Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases to process personal data:
- Contract – where processing is necessary to supply goods, deliver orders, and provide customer support related to an order
- Legal obligation – where we must keep records for tax, accounting, or regulatory purposes
- Legitimate interests – to operate our business, improve our services, prevent fraud, and keep our systems secure
- Consent – where you have actively opted in (for example, marketing emails). You may withdraw consent at any time
5. Marketing Communications
Where you have opted in, we may send marketing communications by email. You can opt out at any time by using the unsubscribe link in our emails or by contacting us.
6. Cookies and Analytics
Our website uses cookies and similar technologies to provide core functionality and to understand how visitors use our site.
6.1 What Cookies Do
- Enable essential site features (such as the basket and checkout process)
- Remember preferences (where applicable)
- Measure site performance and usage (analytics)
- Support advertising features (where enabled)
6.2 Managing Cookies
You can control or disable cookies through your browser settings. Disabling some cookies may affect how the website functions.
7. Who We Share Your Data With
We do not sell personal data. We may share personal data only where necessary to run our business and fulfil orders, including with:
- Payment processors (to take payment securely)
- Courier companies and pallet distribution networks (to deliver your order)
- IT, hosting, and website service providers (to operate and maintain the site)
- Professional advisers (such as accountants, auditors, and insurers)
All third parties are expected to process personal data securely and in compliance with UK GDPR.
8. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Access to personal data is limited to staff and service providers who require it to perform their duties.
9. How Long We Keep Your Data
We keep personal data only for as long as necessary for the purposes set out in this policy, including to meet legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason we hold it.
10. Your Rights Under UK GDPR
You have rights relating to your personal data, including:
- The right to access your personal data
- The right to correct inaccurate or incomplete personal data
- The right to request deletion of personal data (where applicable)
- The right to restrict or object to certain processing
- The right to data portability (where applicable)
- The right to withdraw consent at any time (where processing is based on consent)
To exercise your rights, please contact us using the details shown on our website.
11. Complaints
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
12. International Data Transfers
If we transfer personal data outside the UK, we will ensure appropriate safeguards are in place, such as contractual protections, to maintain GDPR-level protection.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we operate. The current version will be published on this page.
14. Contact
For questions about this Privacy Policy or your personal data, please contact Paving Slabs Direct using the contact details provided on our website.